In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in _destroy_pages_crste() Use READ_ONCE() in… (CVE-2026-98649)
Description
A race condition vulnerability in the Linux kernel's KVM s390 subsystem was fixed by using READ_ONCE() in the _destroy_pages_crste() function to prevent multiple dereferences of a pointer. This fix addresses a concurrency issue that could lead to inconsistent behavior during page destruction.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel affects the KVM s390 virtualization component, specifically in the _destroy_pages_crste() function. The issue involves a race condition caused by multiple dereferences of the crste pointer without proper atomic access. The fix applies the READ_ONCE() macro to ensure the crste pointer is read atomically, preventing race conditions during page destruction.
Potential Impact
The vulnerability could cause inconsistent or undefined behavior in the KVM s390 virtualization environment due to a race condition. No known exploits are reported in the wild. The impact is limited to the affected kernel component and may affect system stability or security in virtualized environments using s390 architecture.
Mitigation Recommendations
A fix has been implemented in the Linux kernel by applying READ_ONCE() in the _destroy_pages_crste() function. Users should update their Linux kernel to a version that includes this fix. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-rw83-2w75-m53r
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98649"]
Threat ID: 6ad520ad2cdf04f656993a40
Added to database: 10/18/2026, 19:40:29 UTC
Last enriched: 10/18/2026, 22:29:30 UTC
Last updated: 10/19/2026, 00:48:24 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.